CVE-2009-1204

Tiki Wiki CMS Groupware (Tiki) 2.2 is affected by multiple XSS flaws via the PHP_SELF parameter in tiki-galleries.php, tiki-list_file_gallery.php, tiki-listpages.php, and tiki-orphan_pages.php. The OpenVAS entry also notes vulnerabilities for versions

CVE-2009-1204

creationtimestamp| type| source ---|---|--- 2009-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32854 2009-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32853 2009-03-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32852...

Fedora Core 10 FEDORA-2009-1204 (roundcubemail)

The remote host is missing an update to roundcubemail announced via advisory FEDORA-2009-1204. OpenVAS Vulnerability Test $Id: fcore20091204.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-1204 roundcubemail Authors: Thomas Reinke Copyright: Copyrig...

CVE-2008-1204

CVE-2008-1204: XSS vulnerabilities in the Administration Console of Sun Java System Access Manager 7.1 and 7 2005Q4 allow remote attackers to inject arbitrary web script/HTML via unspecified vectors in the Help and Version windows. The NVD entry lists a base CVSS v2 score of 4.3 (Network attack v...

CVE-2008-1204

Multiple cross-site scripting XSS vulnerabilities in the Administration Console in Sun Java System Access Manager 7.1 and 7 2005Q4 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 Help and 2 Version windows...

Debian: Security Advisory (DSA-1204-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1204-1 (ingo1)

The remote host is missing an update to ingo1 announced via advisory DSA 1204-1. It was discovered that the Ingo email filter rules manager performs insufficient escaping of user-provided data in created procmail rules files, which allows the execution of arbitrary shell commands. OpenVAS...

CVE-2007-1204

The CVE-2007-1204 issue affects Microsoft Windows XP SP2 with the UPnP service. It is a stack-based buffer overflow triggered by specially crafted HTTP headers in UPnP requests/notifications, allowing a remote attacker on the same subnet to execute arbitrary code in the context of the vulnerable ...

iDefense Security Advisory 04.10.07: Microsoft Windows Universal Plug and Play Memory Corruption Vulnerability

Microsoft Windows Universal Plug and Play Memory Corruption Vulnerability iDefense Security Advisory 04.10.07 http://labs.idefense.com/intelligence/vulnerabilities/ Apr 10, 2007 I. BACKGROUND Universal Plug and Play UPnP is a group of network protocols that work together to enable devices to...

Microsoft Windows UPnP Service Remote Code Execution (MS07-019; CVE-2007-1204)

The Universal Plug and Play UPnP service in Microsoft Windows is vulnerable to remote code execution. UPnP is a set of computer network protocols that extends Plug and Play to allow computers and devices to configure network services automatically. A remote attacker may exploit this issue to caus...

Debian DSA-1204-1 : ingo1 - missing input sanitising

It was discovered that the Ingo email filter rules manager performs insufficient escaping of user-provided data in created procmail rules files, which allows the execution of arbitrary shell commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...

CVE-2006-1204

The CVE-2006-1204 entry concerns multiple XSS vulnerabilities in txtForum 1.0.4-dev and earlier. The affected components include index.php, new_topic.php, profile.php, reply.php, and view_topic.php, with vulnerable parameters such as prev, next, rand5, r_username, r_loc, r_num, r_family_name, r_i...

CVE-2005-1204

Desktop Rover 3.0 (and possibly earlier versions) is affected by a vulnerability that allows remote attackers to cause a denial of service (application crash) by sending a crafted packet to TCP port 61427, triggering an invalid memory access. The available sources confirm the affected product and...

CVE-2004-1204

FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service application crash by calling Xman with a long -title value, possibly triggering a buffer overflow...

CVE-2004-1204

FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service application crash by calling Xman with a long -title value, possibly triggering a buffer overflow...

CVE-2004-1204

FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service application crash by calling Xman with a long -title value, possibly triggering a buffer overflow...

CVE-2004-1204

FluxBox 0.9.10 and earlier versions allows local users to cause a denial of service application crash by calling Xman with a long -title value, possibly triggering a buffer overflow...

CVE-2003-1204

Multiple cross-site scripting XSS vulnerabilities in Mambo Site Server 4.0.12 BETA and earlier allow remote attackers to execute script on other clients via 1 the link parameter in sectionswindow.php, the directory parameter in 2 gallery.php, 3 navigation.php, or 4 uploadimage.php, the path...

CVE-2002-1204

Netscape Communicator 4.x allows attackers to use a link to steal a user's preferences, including potentially sensitive information such as URL history, e-mail address, and possibly the e-mail password, by redefining the userpref function and accessing the prefs.js file, which is stored in a...

CVE-2002-1204

CVE-2002-1204 affects Netscape Communicator 4.x. The vulnerability allows an attacker to steal a user’s preferences (e.g., URL history, e‑mail address, and potentially the e‑mail password) by redefining the user_pref() function and reading prefs.js, which is stored in a directory with a predictab...